CVE-2013-0207

The CVE-2013-0207 entry concerns Drupal's Mark Complete module (7.x-1.x) with a CSRF vulnerability in versions before 7.x-1.1 that could allow remote attackers to hijack user sessions. The issue is due to insufficient CSRF protections in the module’s AJAX/date-field update mechanism. Affected pro...